[rupertdigby]

blue screen as before

STOP: c000021a {Fatal System Error}
The windows Logon Process system process terminated unexpectedly with a status of 0xc0000005 (0x00000000 0x00000000).
The system has been shut down.

[Advertisements]

I am preparing a new set of instructions for you to complete.

[SweetTech]

I am preparing a new set of instructions for you to complete.

[SweetTech]

Lets manually replace the winlogon.exe file from the i386 folder to the system32.

While in xPUD, click on mnt then on sda2, on the right pane, double click on the WINDOWS folder, then on the system32 folder. Locate the file winlogon.exe in this folder. Right click on the file and rename it to winlogon.exe.vir.

Then go back one step. That should put you in the /mnt/sda2/WINDOWS folder. Locate the ServicePackFiles folder and double click on it, then on the i386 folder. Locate the file winlogon.exe in this folder. Right click on it and select Copy.

Go back two steps, that should put you back on the /mnt/sda2/WINDOWS folder. locate and double click on the System32 folder. On an empty space in the right pane, right click and select Paste. That should copy the winlogon.exe file to the System32 folder.

If successful, restart in Normal Mode.

[rupertdigby]

[quote name='SweetTech' timestamp='1296672831' post='1963784']
I am preparing a new set of instructions for you to complete.
[/quote


i have gone back 2 instructions ago and now booted normal no flash drive, have the desk top open and the task manager open

[SweetTech]

Okay, please see if you can start Explorer.exe

[rupertdigby]

pop up saying windows cannot access the specified device, path, or file. you may not have the appropriate permissions to access the item

when i started task manager explore.exe was already in there. i still did the file search as instructed. there was a pop that was already there and it was like the one i described before.
explorer.exe application error

[rupertdigby]

should i try the last instructions for the xpud changes

[SweetTech]

Yes.

[rupertdigby]

i followed instructions for xpud. removed flash drive and booted normaly and get pop up Explorer.exe - application error same as before
task manager works

[SweetTech]

I have a strong suspicion that the infection you have has damaged some of your system files.

I'd like for you to attempt to run a scan and see if your able to boot up after this.

Can you press Windows key + R and see if that will display the Run dialog box.

If it does run this scan:


SFC ScanNow

Go to the Run box on the Start Menu and type in:

sfc /scannow

Make sure to include the space between the first "c" and the "/".

This will run the System File checker and it will scan for corrupt or missing files. It may prompt you to insert the CD if it needs to obtain files.

Please post back when it has finished letting me know what it has reported.

More info on this process can be found here.

[rupertdigby]

can't get working. task manager is working. can i get it to do something. i can browse in there can't i

[SweetTech]

With task manager open go to File > New Task (Run) > type in sfc /scannow followed by Enter. See if that works.

[rupertdigby]

not working. i did find the file i wanted and moved it to the desk top. can i copy the file your looking to the flash and scan it some how on the deskpc

[rupertdigby]

for a second i see the window pop up but doesn't stay atop the desk top

[rupertdigby]

2 pop ups

windows file protection
files that are required for windows to run properly must be copied to the dll cache
insert your windows xp professional cd-rom now
retry more info cancel

windows file protection
please wait while windows verifies that all protected windows files are intact and in their original versions